• 🔭 Focus: Bridging robust software engineering with defensive security — building tools while learning to break (and fix) them.
• 🛡️ Currently: Working through PortSwigger Web Security Academy — deep in the Web LLM Attacks module, with a bug bounty / web appsec specialization track.
• 🐍 Habit: When a manual security workflow gets repetitive, I script it — Python automation for things like brute-forcing, timing analysis, and race condition testing.
• 🐧 Environment: Linux-native (Parrot OS / Fedora) for dev, pentesting, and infra work.
• 🌱 Also building: RAG pipelines and AI assistant architecture (LangGraph, FastAPI, vector DBs).

FocusFlow — a Flutter productivity app. Currently deep in UI architecture: theme-aware custom AppBars, SystemUiOverlayStyle status bar handling, and go_router's StatefulShellRoute.indexedStack for multi-branch bottom nav.

Y-CARE NET — product + technical architecture design for a mobile health platform for Kenyan youth. Notion-style workspace covering the full stack (React Native Expo, FastAPI, PostgreSQL) and Kenya Data Protection Act compliance.

PortSwigger Lab Notes + Tooling — Python scripts that replace Burp Community's throttled Intruder for auth-focused labs: 2FA logic flaws, cookie brute-forcing, username enumeration via timing analysis, and race condition exploitation (Turbo Intruder). Every lab gets structured notes: Vulnerability Concept → Exploitation Logic → Script Workflow → Why It Matters → Remediation.

Cybersecurity: Web AppSec · Penetration Testing · OSINT · Steganography · Burp Suite / Turbo Intruder.

DevOps/Infra: Docker · Nginx · Linux (Systemd, Kernel Modules).

GUI/Frameworks: PyQt6 / PySide6 · Flask · Django · FastAPI